aidin36 / simpletextcrypt Goto Github PK

There should be some tests for SettingsActivity.

Assuming this is an app to encrypt a text using user-provided password, the derivation scheme is almost as important as the encryption.

I recomment using a new, memory-aware one.

https://f-droid.org/wiki/index.php?title=com.aidinhut.simpletextcrypt/lastbuild_11&oldid=282308

Or else, how the user would know?

You can add Screenshots for F-Droid, too, if you want.

https://f-droid.org/en/docs/All_About_Descriptions_Graphics_and_Screenshots/

https://gitlab.com/snippets/1895688

Hi, from the readme.md it said that the plaintext uses AES in CBC mode with PKCS5 padding for encryption. If I know the key, is it possible to decrypt the encrypted-text in linux with the openssl command?

"No File Found" when attempting to download from F-Droid.

Each activity should call LockActivity at onResume.

Right now, only MainActivity calls LockActivity, and if SettingsActivity was active before putting app to the background, lock screen would never shown.

In LockActivity, user has to tap on Unlock button. It would be easier for her to just tap the tick (enter) button on the keyboard.

There should be some tests for MainActivity.

I'm a PhD student interested in finding security vulnerabilities in open source projects.

We found a total of 9 warnings (indicating potential vulnerabilities) when running the CogniCrypt static analyzer (*) on SimpleTextCrypt (or its library dependencies). We documented each one of these issues in private gists for the sake of confidentiality (non-disclosure).

Can you please let us know whether we can share these gists with you? We are eager to evaluate the perception of developers (e.g. severity of these warnings) and improve SimpleTextCrypt's security, and the quality of the reports of static analysis tools.

(*) https://github.com/CROSSINGTUD/CryptoAnalysis